A framework for concrete reputation-systems with applications to history-based access control

In a reputation-based trust-management system, agents maintain information about the past behaviour of other agents. This information is used to guide future trust-based decisions about interaction. However, while trust management is a component in security decision-making, many existing reputation-based trust-management systems provide l security-guarantees. In this extended abstract, we describe a mathematical framework for a class of simple reputation-based systems. In these systems, decisions about interaction are taken based on policies that are exact requirements on agents’ past histories. We present a basic declarative language, based on pure-past linear temporal logic, intended for writing simple policies. While the basic language is reasonably expressive (encoding e.g. Chinese Wall policies) we show how one can extend it with quantification and parameterized events. This allows us to encode other policies known from the literature, e.g., ‘one-out-ofk’. The problem of c...

• Type: Conference
• Year: 2005
• Where: CCS
• Authors: Karl Krukow, Mogens Nielsen, Vladimiro Sassone
• Keywords: Basic Language, CCS 2005, Future Trust-based Decisions, Reputation-based Trust-management Systems, Security Privacy